CVE-2022-25617

2022-05-1818:15:10

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.7%

JSON

Reflected Cross-Site Scripting (XSS) vulnerability in Code Snippets plugin <= 2.14.3 at WordPress via &orderby vulnerable parameter.

CPENameOperatorVersion
code-snippetseq1.7.1
code-snippetseq2.3.0
code-snippetseq1.7.1.1
code-snippetseq2.0.0
code-snippetseq2.0.3
code-snippetseq2.12.0
code-snippetseq2.6.0
code-snippetseq1.7.0
code-snippetseq2.0.2
code-snippetseq2.4.2

Name	Operator	Version
code-snippets	eq	1.7.1
code-snippets	eq	2.3.0
code-snippets	eq	1.7.1.1
code-snippets	eq	2.0.0
code-snippets	eq	2.0.3
code-snippets	eq	2.12.0
code-snippets	eq	2.6.0
code-snippets	eq	1.7.0
code-snippets	eq	2.0.2
code-snippets	eq	2.4.2

Rows per page:

1-10 of 601

References

patchstack.com/database/vulnerability/code-snippets/wordpress-code-snippets-plugin-2-14-3-authenticated-reflected-cross-site-scripting-xss-vulnerability

wordpress.org/plugins/code-snippets/